CVE-2021-29221

CVE-2021-29221 is a local privilege escalation vulnerability affecting Erlang/OTP versions prior to 23.2.3, specifically on Windows systems with unsafe filesystem permissions. A local attacker could exploit this by adding files to an existing Erlang installation, potentially hijacking user accounts running Erlang programs or coercing the erlsrv.exe service to execute arbitrary code as Local System. With a CVSS score of 7.0 (HIGH), this vulnerability requires high attack complexity and user interaction, but can lead to high confidentiality, integrity, and availability impacts. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.